Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6uayIEZ68T_F19uf7ZQPJMCuPZ4.roa
File:                     6uayIEZ68T_F19uf7ZQPJMCuPZ4.roa (raw, json)
Hash identifier:          em8KdW+ok/NRU27UgnTzt61n9pjUXuYjrmAFYBxcF6I=
Subject key identifier:   EA:E6:B2:20:46:7A:F1:3F:C5:D7:DB:9F:ED:94:0F:24:C0:AE:3D:9E
Certificate issuer:       /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial:       08634BB2
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6uayIEZ68T_F19uf7ZQPJMCuPZ4.roa
Signing time:             Mon 11 Apr 2022 10:03:28 +0000
ROA not before:           Mon 11 Apr 2022 10:03:28 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     834
IP address blocks:        193.37.196.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 140725170 (0x8634bb2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
        Validity
            Not Before: Apr 11 10:03:28 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=eae6b220467af13fc5d7db9fed940f24c0ae3d9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f3:72:95:c8:4d:11:a0:b7:98:dd:4d:6f:55:
                    b0:25:86:28:3c:b5:4c:17:c4:4c:1e:0a:df:4c:71:
                    88:52:1c:7e:8b:93:b3:4f:55:9b:00:c4:d4:14:40:
                    d9:2a:4c:42:22:59:63:cd:e5:68:a1:99:da:33:3f:
                    0c:59:cc:cc:bf:c4:85:be:54:15:0f:e5:09:25:58:
                    e4:7b:92:45:9f:03:f9:87:d3:e1:0c:2c:3c:d4:37:
                    8b:88:6b:2f:bb:fe:e8:49:01:70:84:55:f7:bf:72:
                    08:aa:9b:a4:d8:7b:5e:0b:7a:1e:b2:c1:7a:dd:64:
                    43:28:2e:22:61:7d:3c:94:27:6b:15:33:02:5b:00:
                    d7:65:3e:b0:78:cd:8d:9b:ca:3d:b9:da:d8:0d:c2:
                    86:0c:9e:1f:49:f6:6b:0e:26:65:84:15:d6:7d:9a:
                    3f:55:9a:bc:c3:e2:64:53:05:96:0e:df:c7:69:9a:
                    aa:5e:61:a0:b8:2b:e9:bc:06:20:d9:2a:16:92:72:
                    a8:d0:29:5f:4f:39:a2:9a:f5:17:5f:0c:8a:09:89:
                    e4:a8:ee:b4:31:6d:81:3c:ec:7b:51:fd:a6:04:bd:
                    cb:a5:fd:92:60:39:5f:d1:fb:f9:2b:c0:f2:fa:14:
                    99:4d:af:83:c6:2e:7b:dc:91:61:85:4e:3e:e7:0d:
                    a4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:B2:20:46:7A:F1:3F:C5:D7:DB:9F:ED:94:0F:24:C0:AE:3D:9E
            X509v3 Authority Key Identifier:
                keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/6uayIEZ68T_F19uf7ZQPJMCuPZ4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.37.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:7d:a7:75:0a:a3:26:8f:07:31:5b:a5:ba:2a:f6:ab:ea:21:
         d3:2d:ff:cf:a2:8c:a8:b9:cc:fe:3a:7f:ff:38:40:45:2e:ab:
         6e:31:ac:d4:85:68:26:52:ca:f9:43:97:52:73:c2:34:e9:8e:
         62:22:79:ab:6c:d2:be:5f:d1:54:2b:53:58:4e:62:48:f2:bd:
         b0:81:c6:11:0a:ad:cc:c9:79:93:e2:2f:c2:78:8a:6b:61:2c:
         9f:a8:0a:4a:e5:35:21:e6:24:5d:d9:b0:18:fb:d9:a7:e8:a1:
         f4:10:b6:96:34:85:b2:1c:d8:5c:09:04:4a:9d:03:c7:62:3a:
         f8:3b:c0:25:76:d0:56:d7:0f:1a:6a:d7:b5:4a:50:6a:50:da:
         36:5a:d3:18:8e:47:51:39:d0:09:bc:e2:f1:71:5d:36:c0:71:
         9c:bf:85:d3:ef:f8:5a:72:85:f5:74:ed:d1:0d:47:f7:5b:14:
         6c:dc:51:a6:2a:20:e8:9b:a2:22:f3:70:60:ab:d7:de:fe:50:
         b4:39:67:f1:f3:17:85:ec:49:b7:97:7e:be:f0:ba:b8:97:7a:
         8c:e3:d8:10:f7:f1:e3:69:22:47:2a:1a:8e:95:b1:97:df:c7:
         df:3c:c8:6f:98:07:99:29:3a:76:72:6e:fd:50:e2:d9:6b:1e:
         cb:58:e3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:35 2024 by rpki-client on console-fra.rpki-client.org